$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa File: a970266b-fd60-3d1a-b987-e2161d5dadeb.roa (raw, json) Hash identifier: IT6adPhDJOQFfqM2zqoEiolkBxOXXMUlVBT+6fRsHwc= Subject key identifier: C1:B3:89:52:E5:58:79:B9:CE:73:72:98:DD:E9:C1:C6:35:FB:6A:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0A36F350C93BE46C2D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:36:f3:50:c9:3b:e4:6c:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=ba2046c4-f3ea-4f8e-a17e-91536668ccbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:85:42:a9:82:e9:2a:f0:6f:4e:38:0e:d0:71: 10:53:7f:78:4c:61:dc:8e:fc:ae:39:62:48:52:06: 7e:29:7f:ef:92:7a:09:ed:01:36:ff:45:86:7e:05: 86:6f:c0:18:7d:c2:73:f1:21:c4:57:b4:02:1c:41: 97:fd:48:01:eb:8f:16:5d:1a:1f:ad:c5:85:e5:ce: 12:c1:e3:5c:f5:eb:48:3c:80:10:5c:af:f2:fb:09: 65:37:c1:52:09:fc:49:1b:61:c8:e5:93:49:ea:31: cd:c2:3a:ab:79:d4:15:d1:ce:84:71:7c:35:0c:7f: 06:b1:3f:74:6f:c6:c8:62:37:c4:b8:00:f0:ae:ce: bc:75:d4:45:81:c1:32:ea:cb:fc:2c:d6:8c:1f:6e: 9c:76:1e:e5:05:b3:83:23:96:3c:f6:7d:98:c0:cd: 07:74:27:59:5c:22:85:63:4b:7e:b2:3a:a2:57:6f: 8f:52:0b:71:cb:ca:cd:8c:87:34:23:48:85:0d:76: 8c:23:be:f0:5a:d6:bf:3a:c2:c0:80:bc:bb:53:11: 6f:b3:d0:3f:54:95:d2:dc:14:74:75:da:0b:ab:d7: 80:cc:54:44:ff:68:ba:34:18:27:15:1c:cf:f8:42: 0d:b8:4b:1b:9e:64:8f:fa:01:57:9d:0c:f1:b7:ea: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:89:52:E5:58:79:B9:CE:73:72:98:DD:E9:C1:C6:35:FB:6A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c1:f4:14:be:fb:a9:68:d4:dd:1b:18:55:45:df:18:14:e2: 65:8e:67:9d:47:ba:2e:24:39:91:c0:ed:e1:9d:d8:61:61:5c: 84:23:39:3a:32:02:47:8c:71:7c:03:50:af:44:92:11:a4:ea: d1:0a:e6:fd:4c:20:5e:5a:2e:f8:3b:32:f7:ce:d5:51:cd:a7: d0:ca:3d:64:0a:50:6a:ce:51:67:26:ba:66:06:70:28:f1:30: 6d:b9:3d:75:08:dd:00:3d:88:c1:fa:4c:0c:50:0d:07:05:ba: f4:48:87:b9:da:1f:ff:40:36:2f:04:05:50:6a:71:ff:37:04: 20:59:b1:b0:df:88:72:2d:08:d8:5d:92:e3:9e:a3:80:47:1f: 28:b4:37:3c:3b:86:87:c5:e9:f2:c7:1b:15:97:81:fc:bc:71: 1c:ad:d6:43:fb:04:21:d4:da:21:a4:89:23:00:b0:29:a7:4f: 1d:f4:7a:d5:6a:fc:39:df:82:dc:61:22:f4:18:cc:70:ca:8d: 94:ea:27:15:10:58:6a:86:8e:48:1e:c4:f9:3e:be:b7:58:8b: 70:a9:02:31:38:6c:5a:ee:be:3a:22:02:cf:10:d2:5c:36:c9: f5:09:24:8c:e0:3f:36:3e:95:bc:c2:47:29:fb:84:d2:6a:83: 68:ef:02:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgo281DJO+RsLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YmEyMDQ2YzQtZjNlYS00ZjhlLWExN2UtOTE1MzY2NjhjY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioVCqYLpKvBvTjgO0HEQU394TGHcjvyuOWJI UgZ+KX/vknoJ7QE2/0WGfgWGb8AYfcJz8SHEV7QCHEGX/UgB648WXRofrcWF5c4S weNc9etIPIAQXK/y+wllN8FSCfxJG2HI5ZNJ6jHNwjqredQV0c6EcXw1DH8GsT90 b8bIYjfEuADwrs68ddRFgcEy6sv8LNaMH26cdh7lBbODI5Y89n2YwM0HdCdZXCKF Y0t+sjqiV2+PUgtxy8rNjIc0I0iFDXaMI77wWta/OsLAgLy7UxFvs9A/VJXS3BR0 ddoLq9eAzFRE/2i6NBgnFRzP+EINuEsbnmSP+gFXnQzxt+ppzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGziVLlWHm5znNymN3pwcY1+2pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk3MDI2NmItZmQ2MC0z ZDFhLWI5ODctZTIxNjFkNWRhZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLB9BS++6lo1N0bGFVF3xgU4mWOZ51Hui4kOZHA7eGd2GFhXIQjOToy AkeMcXwDUK9EkhGk6tEK5v1MIF5aLvg7MvfO1VHNp9DKPWQKUGrOUWcmumYGcCjx MG25PXUI3QA9iMH6TAxQDQcFuvRIh7naH/9ANi8EBVBqcf83BCBZsbDfiHItCNhd kuOeo4BHHyi0Nzw7hofF6fLHGxWXgfy8cRyt1kP7BCHU2iGkiSMAsCmnTx30etVq /DnfgtxhIvQYzHDKjZTqJxUQWGqGjkgexPk+vrdYi3CpAjE4bFruvjoiAs8Q0lw2 yfUJJIzgPzY+lbzCRyn7hNJqg2jvAs0= -----END CERTIFICATE-----Generated at Sun May 11 04:07:19 2025 by rpki-client